Legal
Privacy Policy
Last updated: June 7, 2026
This Privacy Policy explains what information OsuStocks (the “Service”) handles and why. OsuStocks is a free, fan-made game; it involves no payments, and we keep data to the minimum needed to run the game.
1. Information we handle
osu! account info (via OAuth).When you sign in, osu! shares a limited set of details so we can identify your account — your osu! user ID and username (and your role within the game). We do not receive your osu! password.
Game data. As you play, the Service stores fictional game data tied to your account: your virtual wallet balance, your holdings and portfolio, and your virtual trade history. This is game data, not financial records.
Stored in your browser.To keep you signed in, we store a session access token (a JWT) and its expiry in your browser’s localStorage. If you use the optional developer token field, the token you paste is stored the same way. This stays on your device.
2. How we use information
- to sign you in and keep your session active;
- to run the game — show the market, your portfolio and wallet, and process virtual trades;
- to operate and protect the Service, such as rate limiting and preventing abuse.
3. What we do not do
- We do not collect or process real payment or financial information — there are none.
- We do not sell or rent your information.
- We do not use advertising, ad networks, or cross-site tracking. Any product analytics is optional and privacy-respecting (see “Analytics” below).
Analytics (optional)
The deploying operator may enable PostHog, a product-analytics provider, to collect privacy-respecting usage events — such as page views and which features are used — to understand and improve the game. Analytics is off unless the operator configures it, is never used for advertising, and when enabled, PostHog processes this data on the operator’s behalf. When analytics is disabled, the app loads no analytics code and sends no such data.
4. Cookies and local storage
We use your browser’s localStorage to hold your session token; we do not use tracking cookies. Logging out, or clearing your browser storage, removes the token from your device.
5. Third parties
Sign-in is handled through osu! (ppy Pty Ltd) using OAuth; osu!’s handling of your account data is governed by its own privacy policy. The Service is delivered through hosting and infrastructure providers that process requests in order to run the site.
6. Data retention and deletion
Game data stays associated with your account while it is active. You can remove the data stored on your device at any time by logging out or clearing your browser storage. To request deletion of your account’s game data, contact us through the project repository below.
7. Children’s privacy
OsuStocks is a general-audience game and is not directed at children. Access to osu! accounts is subject to osu!’s own age and account requirements.
8. Changes to this policy
We may update this policy from time to time. Changes will be reflected by the “Last updated” date above.
9. Contact
Questions about privacy? Reach out through the project’s repository: github.com/zidanejidan12/OsuStocks.API.
See also our Terms of Use.